swissup/module-marketplace

Package scaffoldingcaution

A substantial README documents installation, usage, and extension points, but tests and a changelog are absent from both the artifact and repository. For a package with this operational scope, the missing validation and change history are genuine transparency and maintenance gaps.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning reduces assurance for a package that handles package installation and updates, though it is not by itself evidence of unfitness.

Security policycaution

The repository has no security policy. For a package that manages channels, credentials, and installation of other modules, the lack of an explicitly documented vulnerability-reporting process is a meaningful transparency gap.